Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft
File: 90REoIZ_zKmjVpwf0JITNUajf0s.mft (raw, json)
Hash identifier: /x5dOE1bSar1o9puyU8aHONxQhgVSkA80Lzrax4dZPw=
Subject key identifier: AF:4D:FF:85:C3:BB:61:D3:5A:95:70:6C:68:7F:0C:B9:EB:2A:77:FD
Authority key identifier: F7:44:44:A0:86:7F:CC:A9:A3:56:9C:1F:D0:92:13:35:46:A3:7F:4B
Certificate issuer: /CN=f74444a0867fcca9a3569c1fd092133546a37f4b
Certificate serial: 01A1434D40EFBDAAC9A36AD485EAEE006892
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/90REoIZ_zKmjVpwf0JITNUajf0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft
Manifest number: 1A37
Signing time: Fri 16 Oct 2026 06:01:38 +0000
Manifest this update: Fri 16 Oct 2026 06:01:38 +0000
Manifest next update: Sat 17 Oct 2026 06:01:38 +0000
Files and hashes: 1: 90REoIZ_zKmjVpwf0JITNUajf0s.crl (hash: 0B4hJKKIgSa5+UI+hGeVBq2Icir3lL3NFZr40hOap08=)
2: n2KWOfawjYsdrcU5kcTAVZoJ1KA.roa (hash: xCEQfYPaY0aViHtL0tmC47O4thf/Lzk7C/w84Q6tZQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/90REoIZ_zKmjVpwf0JITNUajf0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 06:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:43:4d:40:ef:bd:aa:c9:a3:6a:d4:85:ea:ee:00:68:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f74444a0867fcca9a3569c1fd092133546a37f4b
Validity
Not Before: Oct 16 06:01:38 2026 GMT
Not After : Oct 17 06:01:38 2026 GMT
Subject: CN=af4dff85c3bb61d35a95706c687f0cb9eb2a77fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ff:6c:39:a1:df:72:67:12:1e:a6:51:79:69:
1c:e6:81:5c:78:d6:ba:17:a6:a4:cf:f2:a4:9d:83:
75:62:5f:9f:a8:df:0f:a5:a1:dc:a7:f9:69:0a:fb:
e0:9a:f3:95:bd:36:5d:5c:89:72:b7:57:0a:48:7d:
21:8d:17:df:96:ea:aa:67:b4:31:7a:3d:29:95:71:
c5:a7:e7:85:dc:b0:97:31:11:20:05:73:a7:57:ec:
4c:f3:65:d7:9a:36:4e:d2:fa:91:20:f1:65:50:ce:
18:ef:1c:2d:0b:30:dc:05:d3:2f:9b:23:ae:4f:6b:
cb:a4:da:a8:5b:52:4e:c1:7f:bf:8a:86:bd:f5:df:
24:dc:5a:14:73:68:fb:66:b5:12:83:5d:27:db:d1:
d4:65:6a:bd:f3:a0:e7:90:7d:d2:9c:7e:4d:ce:06:
f1:d7:3a:00:e4:4c:23:1e:20:d0:9c:d8:a9:e8:39:
fe:af:1a:07:c9:26:79:9b:31:c5:67:fc:c0:7c:a5:
df:c0:16:36:54:c3:ac:a6:5f:ca:ad:b6:55:1e:fd:
6c:38:13:ea:64:b3:2a:23:d4:f0:94:fb:1b:6f:a8:
b3:cc:29:09:c3:28:f1:c5:3e:e5:ab:b4:fd:10:73:
c1:cd:a8:fb:b7:c6:3e:7c:cd:ae:05:2e:3e:b6:10:
8e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:4D:FF:85:C3:BB:61:D3:5A:95:70:6C:68:7F:0C:B9:EB:2A:77:FD
X509v3 Authority Key Identifier:
keyid:F7:44:44:A0:86:7F:CC:A9:A3:56:9C:1F:D0:92:13:35:46:A3:7F:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90REoIZ_zKmjVpwf0JITNUajf0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:89:44:38:28:61:ca:d5:20:9b:8d:e8:fa:27:1f:50:c1:e3:
de:5b:9a:b6:9b:25:66:8f:f4:f3:b9:7f:88:c1:7e:14:bf:91:
78:60:d5:da:30:d2:e6:0c:9b:64:de:f6:bf:10:e4:14:12:3f:
03:9c:bf:f0:dc:61:d6:5f:57:b3:65:6a:58:b4:a6:d8:a7:19:
65:64:b4:9f:73:64:46:47:2e:77:a3:e9:45:f7:e7:10:6f:4e:
9f:94:c9:bd:ce:a7:6f:87:4d:ea:a7:50:cb:6d:4b:e3:08:71:
84:00:31:af:4e:49:2a:06:b9:3e:3e:64:4f:12:0f:63:ab:aa:
6d:5c:b6:f0:3f:75:1a:49:1d:24:aa:10:0a:fc:c4:45:38:5c:
71:3a:ae:c1:c6:3f:01:92:52:f5:be:c0:cc:d7:8a:3b:aa:84:
ad:a8:8b:3e:46:82:1a:65:24:4e:2a:5c:d7:70:76:58:8c:fa:
b1:a0:5a:b3:be:82:c7:44:39:d3:a4:64:59:9f:13:91:a5:a2:
95:93:e7:5b:77:98:69:67:82:86:db:38:b9:01:35:d0:b0:ff:
04:5a:39:7d:9d:82:7a:c5:31:e4:35:0e:6c:64:a9:09:2f:8d:
f2:9e:f8:3e:51:6c:c3:3f:bf:1c:57:e6:20:fb:e2:61:a2:8e:
0f:46:37:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 15:26:39 2026 by rpki-client